
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
File: RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft (raw, json)
Hash identifier: Owe92hSzvp189gCYWNUH8UlMzcePa3SLXYd2DrGnW+c=
Subject key identifier: EC:21:BD:5E:33:1F:47:4A:C8:89:50:44:03:61:E5:71:B3:3F:BF:39
Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
Certificate issuer: /CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Certificate serial: 0197B70E583CC0B9B6D8F410ED225F5EC341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
Manifest number: 06E5
Signing time: Sat 28 Jun 2025 15:00:59 +0000
Manifest this update: Sat 28 Jun 2025 15:00:59 +0000
Manifest next update: Sun 29 Jun 2025 15:00:59 +0000
Files and hashes: 1: Mr0WRrlMlv0_Evxeakjpwz7LiPg.roa (hash: gsCCcQlF73dWTqboxZPlvCMCNzkEYN7/m7aejhTDik0=)
2: RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl (hash: YLVssLw8yUHyQQAVqDDZp2qhu0dZ2jFDSMuGo4PO5SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:58:3c:c0:b9:b6:d8:f4:10:ed:22:5f:5e:c3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Validity
Not Before: Jun 28 15:00:59 2025 GMT
Not After : Jun 29 15:00:59 2025 GMT
Subject: CN=ec21bd5e331f474ac88950440361e571b33fbf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:3c:ae:bf:c2:da:74:3d:18:3b:e9:87:80:
0c:c6:8c:95:16:44:09:ce:aa:ce:c7:38:9f:66:21:
63:be:e0:af:96:19:43:59:b6:49:97:01:71:94:eb:
04:90:b3:5f:94:79:65:b2:ab:71:4d:e9:8d:4b:3b:
09:97:27:aa:be:bb:1c:ae:b4:a5:e5:7f:37:37:72:
07:61:d0:1e:e8:00:7f:b8:51:e2:96:da:3c:0d:66:
3e:aa:cf:88:00:05:a1:4f:5a:a0:9f:78:4a:24:a2:
2e:cd:f3:a0:3c:13:45:27:f5:74:a1:39:2c:2b:c7:
d7:53:c4:e0:93:35:ed:d7:5d:91:4a:45:a2:29:f3:
4f:9b:ed:da:09:bb:7d:1d:99:ca:8b:20:2d:9a:c6:
a3:92:b7:3e:2c:3a:24:48:58:a6:b2:5b:68:d6:7c:
10:45:a2:da:de:88:a9:d4:a8:40:d8:7c:37:97:98:
d1:e5:8c:24:35:e8:3f:30:c0:59:74:5a:68:a0:ef:
cc:54:93:a3:c9:98:95:12:98:0c:a3:b0:70:ee:f5:
c6:4c:ab:52:8d:e8:2d:47:2f:1c:67:27:21:fc:61:
e5:47:be:ca:0b:48:b4:d2:5b:b8:c9:9b:f2:32:5f:
99:cc:e1:43:86:e7:15:59:94:58:ff:89:6c:15:a5:
8c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:21:BD:5E:33:1F:47:4A:C8:89:50:44:03:61:E5:71:B3:3F:BF:39
X509v3 Authority Key Identifier:
keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ff:ab:20:82:a2:67:87:99:e6:f3:3b:aa:c7:48:65:f6:c1:
3f:84:2a:ca:d4:1c:61:65:3f:4f:cf:18:2c:7b:bd:01:2a:35:
c5:84:2c:c3:cb:1b:e0:d5:a9:22:80:53:5b:1a:57:7b:99:77:
f3:82:a7:d5:be:00:6c:80:27:b3:f6:e9:6d:04:7b:c2:b0:04:
f2:31:5c:5e:de:ab:67:b4:fc:93:ca:90:29:4c:3a:ab:6a:8a:
21:2d:7f:7a:9c:1b:e7:26:d7:54:a0:47:4b:1d:5c:b1:88:a5:
04:9d:75:14:37:a2:1b:1f:cf:aa:25:4d:52:e3:65:bb:8c:75:
9d:c4:e9:b4:d1:43:e2:5d:0a:06:4b:fb:ba:b1:e9:ec:b4:dd:
de:af:a3:da:18:b0:40:b4:55:46:a1:16:83:f8:9b:6e:1a:ef:
60:ba:52:03:a4:6b:4e:63:15:25:39:9f:dc:e4:32:01:15:b5:
49:44:08:78:e9:b0:70:3a:b1:a8:62:70:71:4e:44:1e:c5:14:
9e:20:7d:6b:9a:30:58:2b:56:0d:20:55:b2:f3:23:fc:60:97:
ed:a9:4d:71:b6:7d:89:78:46:a6:62:6d:a6:9c:70:0d:54:52:
31:57:ed:96:75:64:c7:8a:ab:59:48:7d:84:ef:da:84:eb:5c:
e0:93:a2:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dlg8wLm22PQQ7SJfXsNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ODMzMTg1MWIzNTU5ZDNjYzgyOTlmNmIwMjBlZjM3OGUy
ZTRiMDQwHhcNMjUwNjI4MTUwMDU5WhcNMjUwNjI5MTUwMDU5WjAzMTEwLwYDVQQD
EyhlYzIxYmQ1ZTMzMWY0NzRhYzg4OTUwNDQwMzYxZTU3MWIzM2ZiZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7w8rr/C2nQ9GDvph4AMxoyVFkQJ
zqrOxzifZiFjvuCvlhlDWbZJlwFxlOsEkLNflHllsqtxTemNSzsJlyeqvrscrrSl
5X83N3IHYdAe6AB/uFHilto8DWY+qs+IAAWhT1qgn3hKJKIuzfOgPBNFJ/V0oTks
K8fXU8TgkzXt112RSkWiKfNPm+3aCbt9HZnKiyAtmsajkrc+LDokSFimslto1nwQ
RaLa3oip1KhA2Hw3l5jR5YwkNeg/MMBZdFpooO/MVJOjyZiVEpgMo7Bw7vXGTKtS
jegtRy8cZych/GHlR77KC0i00lu4yZvyMl+ZzOFDhucVWZRY/4lsFaWMRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwhvV4zH0dKyIlQRANh5XGzP785MB8GA1UdIwQY
MBaAFESDMYUbNVnTzIKZ9rAg7zeOLksEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAt
YTA0NzgxNmQ2MjgzLzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAtYTA0NzgxNmQ2Mjgz
LzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/+rIIKi
Z4eZ5vM7qsdIZfbBP4QqytQcYWU/T88YLHu9ASo1xYQsw8sb4NWpIoBTWxpXe5l3
84Kn1b4AbIAns/bpbQR7wrAE8jFcXt6rZ7T8k8qQKUw6q2qKIS1/epwb5ybXVKBH
Sx1csYilBJ11FDeiGx/PqiVNUuNlu4x1ncTptNFD4l0KBkv7urHp7LTd3q+j2hiw
QLRVRqEWg/ibbhrvYLpSA6RrTmMVJTmf3OQyARW1SUQIeOmwcDqxqGJwcU5EHsUU
niB9a5owWCtWDSBVsvMj/GCX7alNcbZ9iXhGpmJtppxwDVRSMVftlnVkx4qrWUh9
hO/ahOtc4JOiJQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:01 2025 by rpki-client